AWS-Solution-Architect-Associate Free Practice Test

- (Topic 3)
A company has an Amazon S3 data lake that is governed by AWS Lake Formation The company wants to create a visualization in Amazon QuickSight by joining the data in the data lake with operational data that is stored in an Amazon Aurora MySQL database The company wants to enforce column-level authorization so that the company's marketing team can access only a subset of columns in the database
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Use Amazon EMR to ingest the data directly from the database to the QuickSight SPICE engine Include only the required columns
2. B. Use AWS Glue Studio to ingest the data from the database to the S3 data lake Attach an IAM policy to the QuickSight users to enforce column-level access contro
3. C. Use Amazon S3 as the data source in QuickSight
4. D. Use AWS Glue Elastic Views to create a materialized view for the database in Amazon S3 Create an S3 bucket policy to enforce column-level access control for the QuickSight users Use Amazon S3 as the data source in QuickSight.
5. E. Use a Lake Formation blueprint to ingest the data from the database to the S3 data lake Use Lake Formation to enforce column-level access control for the QuickSight users Use Amazon Athena as the data source in QuickSight

Correct Answer: D
Enforce column-level authorization with Amazon QuickSight and AWS Lake Formation https://aws.amazon.com/blogs/big-data/enforce-column-level-authorization-with- amazon-quicksight-and-aws-lake-formation/

- (Topic 1)
A company is using a SQL database to store movie data that is publicly accessible. The database runs on an Amazon RDS Single-AZ DB instance A script runs queries at random intervals each day to record the number of new movies that have been added to the database. The script must report a final total during business hours The company's development team notices that the database performance is inadequate for development tasks when the script is running. A solutions architect must recommend a solution to resolve this issue. Which solution will meet this requirement with the LEAST operational overhead?

1. A. Modify the DB instance to be a Multi-AZ deployment
2. B. Create a read replica of the database Configure the script to query only the read replica
3. C. Instruct the development team to manually export the entries in the database at the end of each day
4. D. Use Amazon ElastiCache to cache the common queries that the script runs against the database

Correct Answer: B

- (Topic 2)
A solutions architect needs to securely store a database user name and password that an application uses to access an Amazon RDS DB instance. The application that accesses the database runs on an Amazon EC2 instance. The solutions architect wants to create a secure parameter in AWS Systems Manager Parameter Store.
What should the solutions architect do to meet this requirement?

1. A. Create an IAM role that has read access to the Parameter Store paramete
2. B. Allow Decrypt access to an AWS Key Management Service (AWS KMS) key that is used to encrypt the paramete
3. C. Assign this IAM role to the EC2 instance.
4. D. Create an IAM policy that allows read access to the Parameter Store paramete
5. E. Allow Decrypt access to an AWS Key Management Service (AWS KMS) key that is used to encrypt the paramete
6. F. Assign this IAM policy to the EC2 instance.
7. G. Create an IAM trust relationship between the Parameter Store parameter and the EC2 instanc
8. H. Specify Amazon RDS as a principal in the trust policy.
9. I. Create an IAM trust relationship between the DB instance and the EC2 instanc
10. J. Specify Systems Manager as a principal in the trust policy.

Correct Answer: B
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work- with-iam.html

- (Topic 4)
A company runs an application on a group of Amazon Linux EC2 instances. For compliance reasons, the company must retain all application log files for 7 years. The log files will be analyzed by a reporting tool that must be able to access all the files concurrently.
Which storage solution meets these requirements MOST cost-effectively?

1. A. Amazon Elastic Block Store (Amazon EBS)
2. B. Amazon Elastic File System (Amazon EFS)
3. C. Amazon EC2 instance store
4. D. Amazon S3

Correct Answer: D
https://docs.aws.amazon.com/efs/latest/ug/transfer-data-to-efs.html

- (Topic 3)
A company wants to use Amazon S3 for the secondary copy of its on-premises dataset. The company would rarely need to access this copy. The storage solution’s cost should be minimal.
Which storage solution meets these requirements?

1. A. S3 Standard
2. B. S3 Intelligent-Tiering
3. C. S3 Standard-Infrequent Access (S3 Standard-IA)
4. D. S3 One Zone-Infrequent Access (S3 One Zone-IA)

Correct Answer: D
S3 One Zone-IA is a storage class that is designed for data that is accessed less frequently, but requires rapid access when needed. Unlike other S3 Storage Classes which store data in a minimum of three Availability Zones (AZs), S3 One Zone-IA stores data in a single AZ and costs 20% less than S3 Standard-IA. This storage class meets the requirements of the company because it provides a low-cost solution for the secondary copy of its on-premises dataset that would rarely need to be accessed. The other storage classes are either more expensive or not suitable for infrequently accessed data. https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html